CVE-2006-7046

PHP remote file inclusion vulnerability in cmpro.intern/login.inc.php for Clan Manager Pro (CMPRO) 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score
CVSS 2.0 9.3 Critical
Status
Modified - cve@mitre.org
Published
2007-02-24
Last modified
2024-09-16
Weaknesses
CWE-94

Affected products

References